How to retrieve client secret from the consumerKey(Client Name) in openAM

Tagged: , , ,

This topic has 2 replies, 3 voices, and was last updated 1 year, 10 months ago by Andy Cory.

  • Author
    Posts
  • #23279
     prakhash21
    Participant

    Hi all,

    Is there is an endpoint in openAM which I can use to retrieve the client secret from the OpenAM.

    I’m using the OpenAM as the keymanager for my application and I have used the below endpoint with parameters to create an application in OpenAM

    http://localhost:8080/openam/frrest/oauth2/client/?_action=create

    Now I need to retrieve back the client secret using client name as I don’t store it in my application side. What is the endpoint I need to use for it? I couldn’t find it in the OpenAM documentation.

    If OpenAM is not allowing to retrieve the client secret with the Client Name, what is the best way to handle this use case?

    • This topic was modified 1 year, 10 months ago by prakhash21.
    • This topic was modified 1 year, 10 months ago by prakhash21.
    #23287

    Hi Prakhash,

    There is no endpoint to retrieve the client secret – the only time AM will communicate this is at the point at creation – the client is responsible for storing that secret securely from then onwards.

    Cheers
    James

    #23339
     Andy Cory
    Participant

    Without being in possession of the client secret, how would the client authenticate itself to retrieve its secret if there were such an endpoint? I’m not sure I’ll see an RFE for this any time soon :-)

Viewing 3 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.

©2020 ForgeRock - we provide an identity and access platform to secure every online relationship for the enterprise market, educational sector and even entire countries. Click to view our privacy policy and terms of use.

Log in with your credentials

Forgot your details?